FastNetMon’s latest release brings several enhancements to your DDoS protection. We’ve added logic to store source and destination MAC addresses in Clickhouse, reworked our sFlow counters logic, and added IPv6 support for Clickhouse access. We’ve also introduced a new dashboard to show top talkersper network and added new fields for API and fcli command hostgroup_counters_total. See below the full list of updates.
Changes:
- Added logic to explicitly export IP length in FastNetMon Flow
- Added logic to store source and destination MAC addresses in Clickhouse
- Reduced excessive logging for traffic_db and added migration schema for srcMac and dstMac
- Behaviour change for Clickhouse traffic and traffic_db. Removed check for existence of fields inputInterface, outputInterface and agentIpAddress as they were introduced in release 2.0.72 and 2.0.100. If you have no such fields traffic_db fill fail. Removed check for default value for packetDateTime
- Changed traffic_db logic to exit with failure when we cannot connect to Clickhouse
- Reworked sFlow counters logic to use on demand conversion to endianless
- Reworked logic to parse sFlow counter samples
- Reworked sFlow plugin to use class instead of tuples for counters
- Moved counters for libsflow to use plain classes
- Switched all non modifying pointer operations to const
- Added separate counter sflow_expanded_counter_sample to track expanded counters samples
- Added logic to save IPv4 and IPv6 per ASN counters to disk
- Fixed names for persistent counter store from speed_counters_total to speed_counters_total.dat.
- Added logic to save per_interface_ipv4_device_counters to disk too
- Added serialize for device_address_ipv4_and_interface_id_t
- Added logic to save per /24 network counters to disk
- Better log for sFlow plugin
- Added suffix _outgoing for fcli output of sudo fcli show baseline_per_host when outgoing was requested explicitly
- Added IPv6 support for Clickhouse access for show baseline_per_host
- Added logic to fix build on machines with system Boost
- FerretDB upgrade
- Added BGP Flow Spec logic to enable Flow Spec on hostgroup basis using flag enable_bgp_flow_spec
- Added global configuration parameter flow_spec_per_hostgroup_management which delegates BGP Flow Spec control to per hostgroup basis instead of using globally enabled logic.
- Fixed alignment
- Moved logic to read default_flow_spec_v6_action outside of flow spec block
- Moved logic to read default_flow_spec_v4_action outside of flow spec block
- Improved documentation for bgp_flow_spec_default_action
- Allowed only TLSv1.2 TLSv1.3 for Nginx
- Added logic to show how many packets sFlow device discarded
- Added logic to track dropped packets for sFlow protocol
- Added new dashboard to show top talkers per network
- Added new fields for API and fcli command hostgroup_counters_total: incoming_packets_tcp_syn, outgoing_packets_tcp_syn, incoming_bytes_tcp_syn, outgoing_bytes_tcp_syn